Another example, files we upload to the corporate one drive would be auto scanned for export compliance after upload, sometimes triggering a security person to come down hard on you for making a mistake. After being hit with it once I asked if I could run that scanning tool before I upload, and was told no. I was pretty surprised they preferred to catch mistakes than prevent them. Wouldn't prevention be better than cure?